Role Summary
The Head of Infrastructure & Information Security is responsible for the end-to-end ownership of the hospital group's IT infrastructure, data centres, end user computing, telephony, contact centre platforms, and information security across 15 hospitals.
The role ensures secure, resilient, cost-effective, and highly available IT services that support 247 clinical and administrative operations, while maintaining compliance with healthcare regulations and India's DPDP Act. The incumbent will drive infrastructure standardisation, cybersecurity maturity, vendor governance, cost optimisation, and continuous improvement of end-user experience for clinical and non-clinical staff.
Key Responsibilities
Infrastructure, Data Centre & IT Operations
- Define and execute group-wide infrastructure strategy across data centres, cloud, networks, servers, storage, backups, and virtualization.
- Own primary and DR data centres, ensuring high availability, scalability, and regulatory compliance.
- Ensure 247 uptime and database support for key applications like ERP, HIS, EMR, RIS, LIS, PACS etc. while maximizing patient and stakeholder experience.
- Lead capacity planning, performance optimisation, DR drills, and business continuity.
- Drive standardisation, automation, monitoring, and incident/problem management across hospitals.
End User Computing & Workplace Technology
- Own EUC strategy covering devices, OS management, productivity software management, patching, and endpoint security.
- Manage device lifecycle, asset management, and service desk SLAs.
Telephony & Contact Centre Platforms
- Own enterprise telephony, VoIP, and hospital communication platforms.
- Manage contact centre software supporting patient engagement and support functions.
- Ensure high availability, integration, and call quality across locations.
Information Security, DPDP & Compliance
- Define and execute information security and data privacy strategy.
- Lead DPDP assessments, remediation, and ongoing compliance.
- Establish and enforce IT and security policies and standards.
- Oversee SOC, IAM, SIEM, endpoint security, vulnerability management, and incident response.
- Ensure protection of patient data and secure third-party integrations.
IT Policies, Training & Awareness
- Define and maintain IT and information security policies and SOPs.
- Drive end-user IT and security training and awareness programs.
- Ensure policy compliance through audits and corrective actions.
Vendor, Budget & Cost Management
- Own vendor selection, contracts, SLAs, and performance governance.
- Manage infrastructure and security budgets.
- Drive cost optimisation through standardisation, consolidation, and license/cloud optimisation.
Governance, Leadership & Stakeholder Management
- Build and lead infrastructure, EUC, telecom, and security teams.
- Define KPIs and dashboards for availability, security, service quality, and cost.
- Partner with hospital leadership, clinical teams, and application owners.
- Lead audits, compliance reviews, and executive reporting.
Key Requirements
Education & Experience
- Bachelor's/Master's degree in IT, Computer Engineering, or related field.
- 15+ years of experience in IT infrastructure and information security, with 5+ years in a leadership role.
- Strong experience in managing 247 mission-critical healthcare systems.
- Experience in a multi-hospital or large healthcare environment preferred.
Technical & Functional Expertise
- Deep expertise in data centres, cloud, networking, virtualization, DR/BCP, and EUC.
- Strong hands-on and leadership experience in information security and DPDP compliance.
- Experience managing telephony and contact centre platforms in large enterprises.
- Solid understanding of healthcare applications and medical device integrations.
- Strong experience in vendor management, budget ownership, and cost optimisation.
Leadership & Personal Attributes
- Strategic thinker with strong execution capability in complex, high-availability environments.
- Excellent communication, presentation and stakeholder management skills
- High integrity with strong focus on patient safety, data privacy, and regulatory compliance.
- Calm, decisive, and resilient in high-pressure operational and security incidents.
